Page MenuHomePhabricator
Create Task
Maniphest T130340

[Reading Infrastructure 2015-16 Q4] Enable two-factor authentication via AuthManager on the Wikimedia cluster
Closed, ResolvedPublic
Actions

Description

Make it possible to enable two-factor authentication based on AuthManager (instead of the current hacky approach of using various login hooks) on the Wikimedia cluster. This involves:

  • finishing AuthManager (see subtasks of T89459);
  • updating all authentication-related code deployed on the Wikimedia cluster to be compatible (T110282);
  • deploying Authmanager on the Wikimedia cluster;
  • updating OATHAuth to use AuthManager (T110457).

This is the main Reading Infrastructure goal for 2015-16 Q4.

Related Objects
Search...

StatusSubtypeAssignedTask
 Resolved• DeskanaT75616 Tracking: API/backend issues blocking Wikipedia app development
 ResolvedAnomieT32788 Allow triggering of user password reset email via the API
 OpenNoneT90925 General authentication improvements for MediaWiki
 ResolvedAnomieT48179 Allow a challenge stage during authentication
 OpenNoneT5709 Refactoring to make external authentication and identity systems easier
 ResolvedTgrT43201 UserLoadFromSession considered evil
 ResolvedAnomieT67493 Session is started by EditAction (problem for extensions using UserLoadFromSession hook)
 OpenFeatureNoneT55156 Provide option to force a login session to end within a certain time
 OpenNoneT89459 Modernize MediaWiki authentication system (AuthManager)
 OpenNoneT110291 Update all extensions to use AuthManager
 ResolvedNoneT130340 [Reading Infrastructure 2015-16 Q4] Enable two-factor authentication via AuthManager on the Wikimedia cluster
 ResolvedTgrT135504 Enable AuthManager in WMF production
 ResolvedAnomieT110282 Update extensions which are deployed on the Wikimedia cluster to use AuthManager
 ResolvedAnomieT91699 Create AuthManager framework and core classes
 ResolvedJoeT97675 Custom session handler corrupted by session_destroy, "Failed to initialize storage module"
 ResolvedJoeT106483 Create new HHVM package for HHVM 3.6.5 + patches
 ResolvedhasharT106699 Upgrade HHVM related packages on Trusty Jenkins slaves
 Resolvedbd808T95864 Mocking abstract objects fails on HHVM
 ResolvedAnomieT110274 Fix PHPUnit version incompatibility between AuthManager and Jenkins
 ResolvedKrinkleT99982 Upgrade PHPUnit to 4.0+
 ResolvedNoneT90303 Fetch dependencies using composer instead of cloning mediawiki/vendor for non-wmf branches
 ResolvedJanZerebeckiT106433 replace inline perl in builder wd-mw-composer-merged-install with a proper script
 ResolvedKrinkleT112895 Support installing composer require-dev packages together with mediawiki/vendor
 ResolvedTgrT110628 Improve AuthManager documentation
 DuplicateNoneT110284 Update LdapAuthentication to use AuthManager
 ResolvedAnomieT110285 Update Echo to use AuthManager
 ResolvedAnomieT110286 Update MoodBar to use AuthManager
 ResolvedAnomieT110287 Update CheckUser to use AuthManager
 ResolvedAnomieT110283 Update CentralAuth to use AuthManager
 ResolvedAnomieT110288 Update OpenStackManager to use AuthManager
 ResolvedAnomieT110453 Update LdapAuthentication to use AuthManager
 Resolvedbd808T128501 Create role for testing/developing LDAPAuth
 ResolvedAnomieT110290 Update Renameuser to use AuthManager
 ResolvedTgrT110302 Update ConfirmEdit to use AuthManager
 ResolvedTgrT110448 Update AbuseFilter to use AuthManager
 ResolvedTgrT87876 Convert AbuseFilter to use extension registration
 ResolvedTgrT110449 Update AntiSpoof to use AuthManager
 ResolvedDerecksonT110456 Update NewUserMessage to use AuthManager
 ResolvedAnomieT110458 Update OAuth to use AuthManager
 ResolvedTgrT110467 Update SpamBlacklist to use AuthManager
 ResolvedTgrT110469 Update TitleBlacklist to use AuthManager
 ResolvedAnomieT110765 Update DisableAccount to use AuthManager
 ResolvedNikerabbitT110766 Update TranslationNotifications to use AuthManager
 ResolvedAnomieT110767 Update MassMessage to use AuthManager
 ResolvedTgrT111483 AuthManager should retain the MobileFrontend watermark at the top of the login screen
 ResolvedAnomieT111487 Update WikimediaIncubator to use AuthManager
 ResolvedTgrT110457 Update OATHAuth to use AuthManager
 Resolved• demonT135043 Update Campaigns to use AuthManager
 ResolvedAnomieT135060 Update PageTriage for AuthManager
 ResolvedAnomieT135065 Update Thanks for AuthManager
 ResolvedJdforrester-WMFT135071 Update VisualEditor for AuthManager
 ResolvedYurikT135074 Update JsonConfig for AuthManager
 ResolvedYurikT137173 Use bot password for the zero scripts that collect analytics
 ResolvedMilimetricT137174 Verify there are no analytics jobs accessing Zero portal
 ResolvedTgrT135698 Update Varnish Zero config downloading script to be ready for AuthManager
 ResolvedTgrT135884 Make Selenium tests work with AuthManager
 ResolvedAnomieT136834 CentralAuth autologin does not work in beta cluster
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL